bugGNU Wget - Bugs: bug #45992, wget not properly following...

 
 

bug #45992: wget not properly following redirects

Submitted by:  Johnny Chin <jchin>
Submitted on:  Thu 17 Sep 2015 11:29:22 PM UTC  
 
Category: Program LogicSeverity: 3 - Normal
Priority: 5 - NormalStatus: Invalid
Privacy: PublicAssigned to: None
Originator Name: Open/Closed: Closed
Release: 1.16.3Operating System: Microsoft Windows
Reproducibility: Every TimeFixed Release: None
Planned Release: NoneRegression: None
Work Required: NonePatch Included: No

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Thu 17 Sep 2015 11:43:27 PM UTC, comment #2:

I found my answer online.
Add this line to my wgetrc:
trust_server_names = on

Johnny Chin <jchin>
Thu 17 Sep 2015 11:34:30 PM UTC, comment #1:

I was just made aware of the command-line option
--trust-server-names
which will save the download with the proper file name.
(avoid the vulnerability CVE-2010-2252)

My question now is, how can I make that the default behavior?
I have existing processes that use wget which rely on this legacy behavior.

Thank you.

Johnny Chin <jchin>
Thu 17 Sep 2015 11:29:22 PM UTC, original submission:

When we are using wget v1.11.4 obtained from here:
http://gnuwin32.sourceforge.net/packages/wget.htm
it follows HTTP redirects correctly.

For example:
wget http://downloads.malwarebytes.org/file/mbam/
should result in getting the most current .exe file
instead version 1.16.x (or anything v1.13 or newer) saves an index.html

My point is that it should NOT be downloading and saving an index.html, it should have followed the redirect and downloaded
http://data-cdn.mbamupdates.com/web/mbam-setup-2.1.8.1057.exe
saving mbam-setup-2.1.8.1057.exe

Please fix.

NOTE: wget v1.11.4 was working perfectly fine except it couldn't handle the encrypted connections of some servers, like:
wget https://www.glasswire.com/download/GlassWireSetup.exe

Johnny Chin <jchin>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by rockdaboot (Updated the item)
  • -unavailable- added by jchin (Submitted the item)
  • -unavailable- added by jchin
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Fri 18 Sep 2015 07:25:38 AM UTCrockdabootStatusNone=>Invalid
      Open/ClosedOpen=>Closed
    Thu 17 Sep 2015 11:29:22 PM UTCjchinCarbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup1